Privacy Policy

Last updated: April 6, 2026

1. Introduction

Roaster ("we", "us", or "the Protocol") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data when you use the Roaster decentralized application ("dApp") on mobile, web, or any other platform.

2. Information We Collect

2.1 Wallet and Authentication Data

  • Solana wallet address (public key) — created automatically via Privy when you sign up. This is your primary identifier on the platform.
  • Authentication tokens — session tokens managed by Privy for secure access. These are stored on your device using secure storage.
  • Linked social accounts — if you choose to sign in via Google or X (Twitter), we receive your display name, profile picture, and email address (Google) or handle and follower count (X) from the OAuth provider. This is optional and user-initiated.

2.2 Activity Data

  • Battle creation and participation history.
  • Rap creations (chosen side, angles, generated lyrics, timestamp).
  • Backings (amounts, sides, timestamps).
  • Payout and NFT claim records.
  • Referral code usage.

2.3 Device Data

  • Push notification token — if you opt in to notifications, we collect your Expo Push Token to deliver battle updates. You may disable notifications at any time through your device settings.
  • Device type — basic device information (e.g., iOS or Android) to deliver a compatible experience.

2.4 On-Chain Data

All transactions you make on Roaster (battle creation, upvote purchases, settlements, NFT mints) are recorded on the Solana blockchain. Transaction data is publicly visible and permanent. Your wallet address and transaction history are visible to anyone with access to the Solana blockchain.

IP Revenue NFT metadata (e.g., song URLs, display attributes) is mutable and may be updated by the Protocol during the beta stage. NFT ownership is always permanent and remains with the holder regardless of metadata changes. The on-chain program itself is upgradable and may receive updates to expand functionality.

3. How We Use Your Information

  • Provide the service: Process battle participation, upvote purchases, fee distributions, settlements, and NFT minting.
  • Display content: Show bars, rankings, battle history, leaderboards, and profile information within the dApp.
  • Notifications: Send push notifications about battle updates, settlements, and payouts (if opted in).
  • Referral tracking: Attribute referral fee distributions to referring users.
  • Platform improvement: Analyze aggregate usage patterns to improve the dApp experience.

4. Information We Do NOT Collect

  • We do not collect your private keys. Your embedded Solana wallet is managed by Privy using a non-custodial architecture. We never have access to your private keys.
  • We do not use third-party analytics or advertising SDKs.
  • We do not sell, rent, or trade your personal data to third parties.
  • We do not track your browsing activity outside the Roaster dApp.

5. Third-Party Services

We rely on the following third-party services, each governed by their own privacy policies:

  • Privy (privy.io) — Authentication, embedded wallet creation, and social login (Google, X). Privy manages wallet private keys in a non-custodial manner.
  • Solana blockchain — All transaction data is stored immutably on the public Solana ledger.
  • Expo / React Native — Push notification delivery via Expo Push Notification service.
  • X (Twitter) — Social login integration and song engagement resolution. We access only the data you authorize via OAuth.

6. Data Storage and Security

  • On-device: Authentication tokens and session data are stored using platform-native secure storage (Keychain on iOS, Keystore on Android).
  • Server-side: Activity data (bars, upvotes, battle participation) is stored in our backend database to power the dApp experience. This data mirrors what is recorded on-chain plus off-chain metadata (e.g., linked social profiles, notification preferences).
  • On-chain: Transaction data, battle state, and NFT metadata are stored permanently on the Solana blockchain.

We implement industry-standard security measures including encrypted communications (TLS), secure credential storage, and access controls to protect your data.

7. Data Retention

  • On-chain data: Permanent and immutable. Cannot be deleted by any party.
  • Off-chain data: Retained for as long as your account is active and as necessary for the operation of the platform. You may request deletion of off-chain data (linked social accounts, notification preferences) by contacting us.
  • Push tokens: Removed when you uninstall the app or revoke notification permissions.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data (e.g., update your linked social profile).
  • Delete off-chain personal data (note: on-chain data cannot be deleted).
  • Withdraw consent for optional data collection (e.g., push notifications, social account linking).
  • Disconnect linked social accounts at any time through your profile settings.

9. Children's Privacy

Roaster is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete that information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Your continued use of the dApp after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, data access requests, or deletion requests, contact us at @roasterdotfun on X.